{
  "title": "MCP Gateway Compatibility and Security Test Plan",
  "schemaVersion": "1.0",
  "researchFreeze": "2026-08-26",
  "protocolRevision": "MCP 2026-07-28",
  "sourcePackage": "research/11",
  "integrityNote": "All 84 listed archive payloads verify by SHA-256. Public datasets are a narrow, noindex selection; product rankings and unexecuted test results are not published.",
  "checkedAt": "2026-08-26",
  "indexing": "noindex, follow",
  "evidencePolicy": "Archive source IDs are mapped to the site-wide canonical evidence library; analytical rows disclose dataset-level evidence.",
  "executionNote": "A design-time test plan; not a claim that tests were executed against products.",
  "count": 24,
  "records": [
    {
      "Test ID": "T001",
      "Category": "Version",
      "Test": "server/discover against current endpoint",
      "Expected evidence": "Supported versions and capabilities without session",
      "Relevant source IDs": "S004",
      "id": "R11-TEST001",
      "sourceIds": [
        "S127"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 1,
        "packageSourceIds": [
          "S004"
        ],
        "raw": {
          "Test ID": "T001",
          "Category": "Version",
          "Test": "server/discover against current endpoint",
          "Expected evidence": "Supported versions and capabilities without session",
          "Relevant source IDs": "S004"
        }
      }
    },
    {
      "Test ID": "T002",
      "Category": "Version",
      "Test": "Modern request metadata validation",
      "Expected evidence": "Header and _meta version agree",
      "Relevant source IDs": "S002",
      "id": "R11-TEST002",
      "sourceIds": [
        "S131"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 2,
        "packageSourceIds": [
          "S002"
        ],
        "raw": {
          "Test ID": "T002",
          "Category": "Version",
          "Test": "Modern request metadata validation",
          "Expected evidence": "Header and _meta version agree",
          "Relevant source IDs": "S002"
        }
      }
    },
    {
      "Test ID": "T003",
      "Category": "Version",
      "Test": "Modern client to legacy server fallback",
      "Expected evidence": "Initialize path succeeds or documented failure",
      "Relevant source IDs": "S007",
      "id": "R11-TEST003",
      "sourceIds": [
        "S053"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 3,
        "packageSourceIds": [
          "S007"
        ],
        "raw": {
          "Test ID": "T003",
          "Category": "Version",
          "Test": "Modern client to legacy server fallback",
          "Expected evidence": "Initialize path succeeds or documented failure",
          "Relevant source IDs": "S007"
        }
      }
    },
    {
      "Test ID": "T004",
      "Category": "Version",
      "Test": "Legacy client through gateway",
      "Expected evidence": "Selected revision and session behavior visible",
      "Relevant source IDs": "S008",
      "id": "R11-TEST004",
      "sourceIds": [
        "S055"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 4,
        "packageSourceIds": [
          "S008"
        ],
        "raw": {
          "Test ID": "T004",
          "Category": "Version",
          "Test": "Legacy client through gateway",
          "Expected evidence": "Selected revision and session behavior visible",
          "Relevant source IDs": "S008"
        }
      }
    },
    {
      "Test ID": "T005",
      "Category": "Routing",
      "Test": "Mcp-Method mismatch",
      "Expected evidence": "Gateway/server rejects request",
      "Relevant source IDs": "S002; S010",
      "id": "R11-TEST005",
      "sourceIds": [
        "S131",
        "S497"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 5,
        "packageSourceIds": [
          "S002",
          "S010"
        ],
        "raw": {
          "Test ID": "T005",
          "Category": "Routing",
          "Test": "Mcp-Method mismatch",
          "Expected evidence": "Gateway/server rejects request",
          "Relevant source IDs": "S002; S010"
        }
      }
    },
    {
      "Test ID": "T006",
      "Category": "Routing",
      "Test": "Mcp-Name mismatch",
      "Expected evidence": "Gateway/server rejects named request",
      "Relevant source IDs": "S002; S010",
      "id": "R11-TEST006",
      "sourceIds": [
        "S131",
        "S497"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 6,
        "packageSourceIds": [
          "S002",
          "S010"
        ],
        "raw": {
          "Test ID": "T006",
          "Category": "Routing",
          "Test": "Mcp-Name mismatch",
          "Expected evidence": "Gateway/server rejects named request",
          "Relevant source IDs": "S002; S010"
        }
      }
    },
    {
      "Test ID": "T007",
      "Category": "Tools",
      "Test": "List and call each target",
      "Expected evidence": "Correct provenance and routing",
      "Relevant source IDs": "S009",
      "id": "R11-TEST007",
      "sourceIds": [
        "S123"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 7,
        "packageSourceIds": [
          "S009"
        ],
        "raw": {
          "Test ID": "T007",
          "Category": "Tools",
          "Test": "List and call each target",
          "Expected evidence": "Correct provenance and routing",
          "Relevant source IDs": "S009"
        }
      }
    },
    {
      "Test ID": "T008",
      "Category": "Prompts",
      "Test": "List/get with colliding names",
      "Expected evidence": "Documented namespace behavior",
      "Relevant source IDs": "S025",
      "id": "R11-TEST008",
      "sourceIds": [
        "S506"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 8,
        "packageSourceIds": [
          "S025"
        ],
        "raw": {
          "Test ID": "T008",
          "Category": "Prompts",
          "Test": "List/get with colliding names",
          "Expected evidence": "Documented namespace behavior",
          "Relevant source IDs": "S025"
        }
      }
    },
    {
      "Test ID": "T009",
      "Category": "Resources",
      "Test": "Colliding resource URI",
      "Expected evidence": "Priority or explicit collision error",
      "Relevant source IDs": "S026; S027",
      "id": "R11-TEST009",
      "sourceIds": [
        "S507",
        "S508"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 9,
        "packageSourceIds": [
          "S026",
          "S027"
        ],
        "raw": {
          "Test ID": "T009",
          "Category": "Resources",
          "Test": "Colliding resource URI",
          "Expected evidence": "Priority or explicit collision error",
          "Relevant source IDs": "S026; S027"
        }
      }
    },
    {
      "Test ID": "T010",
      "Category": "Caching",
      "Test": "Cross-user tools/list attempt",
      "Expected evidence": "Private scope prevents reuse",
      "Relevant source IDs": "S005",
      "id": "R11-TEST010",
      "sourceIds": [
        "S128"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 10,
        "packageSourceIds": [
          "S005"
        ],
        "raw": {
          "Test ID": "T010",
          "Category": "Caching",
          "Test": "Cross-user tools/list attempt",
          "Expected evidence": "Private scope prevents reuse",
          "Relevant source IDs": "S005"
        }
      }
    },
    {
      "Test ID": "T011",
      "Category": "Policy",
      "Test": "Call hidden tool directly",
      "Expected evidence": "Denied at runtime",
      "Relevant source IDs": "S013",
      "id": "R11-TEST011",
      "sourceIds": [
        "S134"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 11,
        "packageSourceIds": [
          "S013"
        ],
        "raw": {
          "Test ID": "T011",
          "Category": "Policy",
          "Test": "Call hidden tool directly",
          "Expected evidence": "Denied at runtime",
          "Relevant source IDs": "S013"
        }
      }
    },
    {
      "Test ID": "T012",
      "Category": "Policy",
      "Test": "Argument constraint bypass",
      "Expected evidence": "Denied after schema validation",
      "Relevant source IDs": "S061",
      "id": "R11-TEST012",
      "sourceIds": [
        "S535"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 12,
        "packageSourceIds": [
          "S061"
        ],
        "raw": {
          "Test ID": "T012",
          "Category": "Policy",
          "Test": "Argument constraint bypass",
          "Expected evidence": "Denied after schema validation",
          "Relevant source IDs": "S061"
        }
      }
    },
    {
      "Test ID": "T013",
      "Category": "Authorization",
      "Test": "Wrong token audience",
      "Expected evidence": "Rejected",
      "Relevant source IDs": "S003; S051",
      "id": "R11-TEST013",
      "sourceIds": [
        "S133",
        "S005"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 13,
        "packageSourceIds": [
          "S003",
          "S051"
        ],
        "raw": {
          "Test ID": "T013",
          "Category": "Authorization",
          "Test": "Wrong token audience",
          "Expected evidence": "Rejected",
          "Relevant source IDs": "S003; S051"
        }
      }
    },
    {
      "Test ID": "T014",
      "Category": "Authorization",
      "Test": "User deprovisioning",
      "Expected evidence": "Access revoked promptly",
      "Relevant source IDs": "S014",
      "id": "R11-TEST014",
      "sourceIds": [
        "S499"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 14,
        "packageSourceIds": [
          "S014"
        ],
        "raw": {
          "Test ID": "T014",
          "Category": "Authorization",
          "Test": "User deprovisioning",
          "Expected evidence": "Access revoked promptly",
          "Relevant source IDs": "S014"
        }
      }
    },
    {
      "Test ID": "T015",
      "Category": "Security",
      "Test": "Malicious tool description",
      "Expected evidence": "Quarantined/reviewed or safely represented",
      "Relevant source IDs": "S059",
      "id": "R11-TEST015",
      "sourceIds": [
        "S108"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 15,
        "packageSourceIds": [
          "S059"
        ],
        "raw": {
          "Test ID": "T015",
          "Category": "Security",
          "Test": "Malicious tool description",
          "Expected evidence": "Quarantined/reviewed or safely represented",
          "Relevant source IDs": "S059"
        }
      }
    },
    {
      "Test ID": "T016",
      "Category": "Security",
      "Test": "Untrusted internal resource URI",
      "Expected evidence": "Not automatically followed",
      "Relevant source IDs": "S027",
      "id": "R11-TEST016",
      "sourceIds": [
        "S508"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 16,
        "packageSourceIds": [
          "S027"
        ],
        "raw": {
          "Test ID": "T016",
          "Category": "Security",
          "Test": "Untrusted internal resource URI",
          "Expected evidence": "Not automatically followed",
          "Relevant source IDs": "S027"
        }
      }
    },
    {
      "Test ID": "T017",
      "Category": "Security",
      "Test": "Oversized schema/catalog",
      "Expected evidence": "Bounded failure, no gateway exhaustion",
      "Relevant source IDs": "S002",
      "id": "R11-TEST017",
      "sourceIds": [
        "S131"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 17,
        "packageSourceIds": [
          "S002"
        ],
        "raw": {
          "Test ID": "T017",
          "Category": "Security",
          "Test": "Oversized schema/catalog",
          "Expected evidence": "Bounded failure, no gateway exhaustion",
          "Relevant source IDs": "S002"
        }
      }
    },
    {
      "Test ID": "T018",
      "Category": "Security",
      "Test": "Log redaction",
      "Expected evidence": "No raw token/secret in logs",
      "Relevant source IDs": "S058",
      "id": "R11-TEST018",
      "sourceIds": [
        "S534"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 18,
        "packageSourceIds": [
          "S058"
        ],
        "raw": {
          "Test ID": "T018",
          "Category": "Security",
          "Test": "Log redaction",
          "Expected evidence": "No raw token/secret in logs",
          "Relevant source IDs": "S058"
        }
      }
    },
    {
      "Test ID": "T019",
      "Category": "Apps",
      "Test": "App-only tool",
      "Expected evidence": "Not exposed to model/cross-server view",
      "Relevant source IDs": "S063",
      "id": "R11-TEST019",
      "sourceIds": [
        "S136"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 19,
        "packageSourceIds": [
          "S063"
        ],
        "raw": {
          "Test ID": "T019",
          "Category": "Apps",
          "Test": "App-only tool",
          "Expected evidence": "Not exposed to model/cross-server view",
          "Relevant source IDs": "S063"
        }
      }
    },
    {
      "Test ID": "T020",
      "Category": "Tasks",
      "Test": "Task ID from other user",
      "Expected evidence": "Denied",
      "Relevant source IDs": "S064",
      "id": "R11-TEST020",
      "sourceIds": [
        "S137"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 20,
        "packageSourceIds": [
          "S064"
        ],
        "raw": {
          "Test ID": "T020",
          "Category": "Tasks",
          "Test": "Task ID from other user",
          "Expected evidence": "Denied",
          "Relevant source IDs": "S064"
        }
      }
    },
    {
      "Test ID": "T021",
      "Category": "Reliability",
      "Test": "One target unavailable during list",
      "Expected evidence": "Documented partial/stale/fail behavior",
      "Relevant source IDs": "S005",
      "id": "R11-TEST021",
      "sourceIds": [
        "S128"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 21,
        "packageSourceIds": [
          "S005"
        ],
        "raw": {
          "Test ID": "T021",
          "Category": "Reliability",
          "Test": "One target unavailable during list",
          "Expected evidence": "Documented partial/stale/fail behavior",
          "Relevant source IDs": "S005"
        }
      }
    },
    {
      "Test ID": "T022",
      "Category": "Reliability",
      "Test": "Data-plane instance loss during stream",
      "Expected evidence": "Defined recovery/no silent duplicate effect",
      "Relevant source IDs": "S002",
      "id": "R11-TEST022",
      "sourceIds": [
        "S131"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 22,
        "packageSourceIds": [
          "S002"
        ],
        "raw": {
          "Test ID": "T022",
          "Category": "Reliability",
          "Test": "Data-plane instance loss during stream",
          "Expected evidence": "Defined recovery/no silent duplicate effect",
          "Relevant source IDs": "S002"
        }
      }
    },
    {
      "Test ID": "T023",
      "Category": "Control plane",
      "Test": "Bad policy rollout",
      "Expected evidence": "Rollback restores known policy",
      "Relevant source IDs": "S061",
      "id": "R11-TEST023",
      "sourceIds": [
        "S535"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 23,
        "packageSourceIds": [
          "S061"
        ],
        "raw": {
          "Test ID": "T023",
          "Category": "Control plane",
          "Test": "Bad policy rollout",
          "Expected evidence": "Rollback restores known policy",
          "Relevant source IDs": "S061"
        }
      }
    },
    {
      "Test ID": "T024",
      "Category": "Control plane",
      "Test": "Revoked server with cached list",
      "Expected evidence": "Invocation denied despite stale catalog",
      "Relevant source IDs": "S005",
      "id": "R11-TEST024",
      "sourceIds": [
        "S128"
      ],
      "evidenceStatus": "archive row citations mapped through the research/11 evidence manifest",
      "archive": {
        "namespace": "research/11/MCP_GATEWAY_COMPATIBILITY_TEST_SUITE.json",
        "row": 24,
        "packageSourceIds": [
          "S005"
        ],
        "raw": {
          "Test ID": "T024",
          "Category": "Control plane",
          "Test": "Revoked server with cached list",
          "Expected evidence": "Invocation denied despite stale catalog",
          "Relevant source IDs": "S005"
        }
      }
    }
  ]
}